Information Security GRC Analyst

Job Summary

A company is looking for an Information Security GRC Analyst.

Key Responsibilities

• Assist with internal and external audit engagements and manage control evidence
• Contribute to compliance maturity by implementing security controls and developing metrics
• Evaluate vendor security and assess project statuses to address security concerns

Required Qualifications

• Bachelor's degree in Information Security, Information Systems, or related field
• 2+ years of experience in Information Security audit settings such as SOC2 and HITRUST
• Knowledge of security controls including NIST, HIPAA, and Privacy
• Equivalent work experience may be considered in lieu of a Bachelor's degree
• Experience with risk management tool administration is a plus